Options

Telnet access control by means of ACL (shifty question)

rjbarlowrjbarlow Member Posts: 411
Hi all,

this is the scenario:

telneacclistab4.jpg

is possible for You to deny telnet access to e0/0 of router1 for all hosts present in the image by placing an IP extended ACL on the same e0/0 of router1?

I want to use an Ext. IP ACL and not the command access-class into the vty line conf. mode.
Pork 3
Maindrian's music

WIP: 70-236, 70-293 and MCSE.

Comments

  • Options
    mikearamamikearama Member Posts: 749
    You could put an acl on int e0, but that would only stop pc2 (from your diagram)... it wouldn't stop anyone from the rest of the network from telnetting, since they'll never touch int e0.
    There are only 10 kinds of people... those who understand binary, and those that don't.

    CCIE Studies: Written passed: Jan 21/12 Lab Prep: Hours reading: 385. Hours labbing: 110

    Taking a time-out to add the CCVP. Capitalizing on a current IPT pilot project.
  • Options
    rjbarlowrjbarlow Member Posts: 411
    Yes mike, that is the answer I wanted to hear. icon_lol.gif Thank You.
    Pork 3
    Maindrian's music

    WIP: 70-236, 70-293 and MCSE.
  • Options
    wait2dominatewait2dominate Member Posts: 74 ■■□□□□□□□□
    Probably a stupid question here.....

    If you wanted to deny all telent access, why wouldn't you want to use the access-class on the vty line?

    Again, probably a stupid question that has a really obvious answer:)
    Brake lights are a sign your car doesn't handle well enough.

    CCNP or MCSE is next to come.
  • Options
    rjbarlowrjbarlow Member Posts: 411
    Probably a stupid question here.....

    If you wanted to deny all telent access, why wouldn't you want to use the access-class on the vty line?

    Again, probably a stupid question that has a really obvious answer:)
    Strangeness that come in mind while making virtual labs... :)
    Pork 3
    Maindrian's music

    WIP: 70-236, 70-293 and MCSE.
Sign In or Register to comment.